Fwd: [Hudson-Dev] active directory integration with Hudson

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Fwd: [Hudson-Dev] active directory integration with Hudson

irfanjs
plz suggest

---------- Forwarded message ----------
From: Martijn Verburg <[hidden email]>
Date: Fri, May 20, 2011 at 6:12 PM
Subject: Re: [Hudson-Dev] active directory integration with Hudson
To: Irfan Sayed <[hidden email]>
Cc: Kohsuke Kawaguchi <[hidden email]>, [hidden email]


Hi Irfan,

Please post your issue to the Jenkins mailing list so that the entire
community can assist.

Cheers,
Martijn

On 20 May 2011 13:38, Irfan Sayed <[hidden email]> wrote:
> no luck . still the same error :(
> plz suggest
>
> On Fri, May 20, 2011 at 5:13 PM, Irfan Sayed <[hidden email]> wrote:
>>
>> ok let me try...
>>
>> On Fri, May 20, 2011 at 5:09 PM, Martijn Verburg
>> <[hidden email]> wrote:
>>>
>>> Hi Irfan,
>>>
>>> I'd try manually downloading the plugin from Jenkins plugin central
>>> and then manually install into Hudson.  The coe base has not split too
>>> much in this area and so it should work.
>>>
>>> Cheers,
>>> Martijn
>>>
>>> On 20 May 2011 11:54, Irfan Sayed <[hidden email]> wrote:
>>> > agree. that i can plan in future . not now...
>>> > entire production system is on hudson and it can not be migrated in one
>>> > day
>>> > . it will take time
>>> > i need to first do the integration.
>>> >
>>> > KK : please suggest any solution to this (as of now i cant migrate to
>>> > jenkins)
>>> >
>>> > regards
>>> > irfan
>>> >
>>> >
>>> > On Fri, May 20, 2011 at 4:19 PM, Martijn Verburg
>>> > <[hidden email]>
>>> > wrote:
>>> >>
>>> >> Hi Irfan,
>>> >>
>>> >> You've probably missed the news, but KK has left the Hudson project
>>> >> and is working on Jenkins (which is effectively Hudson).  He has
>>> >> kindly fixed a few of the active directory plugin issues, but you'll
>>> >> need to 'upgrade' to Jenkins in order to take advantage of them.
>>> >>
>>> >> See jenkins-ci.org for details.
>>> >>
>>> >> Cheers,
>>> >> Martijn
>>> >>
>>> >> On 20 May 2011 11:41, Irfan Sayed <[hidden email]> wrote:
>>> >> > Hi KK,
>>> >> >
>>> >> > i am trying to integrate hudson with active directory. but i am
>>> >> > unable
>>> >> > to
>>> >> > authenticate domain users
>>> >> > here is setup:
>>> >> >
>>> >> > hudson master server : windows XP (SP3)
>>> >> > i have installed active directory plugin and it is running
>>> >> > successfully.
>>> >> > in
>>> >> > the configuration , i entered domain name and hudson successfully
>>> >> > reaching
>>> >> > to domain
>>> >> > the issue is , hudson is not able to authenticate username and
>>> >> > password.
>>> >> > the
>>> >> > user which i am providing is a domain user
>>> >> > further to troubleshoot , i set the environment variable
>>> >> >
>>> >> >
>>> >> > JAVA_OPTS="-Dhudson.plugins.active_directory.ActiveDirectorySecurityRealm.domainControllers=csmidc01.csmi.com:389"
>>> >> > but no success
>>> >> >
>>> >> > the actual error is :
>>> >> >
>>> >> > May 20, 2011 4:14:23 PM
>>> >> > hudson.plugins.active_directory.ActiveDirectoryUnixAuthe
>>> >> > nticationProvider retrieveUser
>>> >> > WARNING: Exhausted all configured domains and could not authenticat
>>> >> > against
>>> >> > any.
>>> >> >
>>> >> > May 20, 2011 4:14:23 PM
>>> >> > hudson.security.AuthenticationProcessingFilter2
>>> >> > onUnsucc
>>> >> > essfulAuthentication
>>> >> > INFO: Login attempt failed
>>> >> > org.acegisecurity.BadCredentialsException: Either no such user
>>> >> > 'bvcontrolbuild'
>>> >> > or incorrect password
>>> >> >         at
>>> >> >
>>> >> > hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProv
>>> >> > ider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:86)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.providers.dao.AbstractUserDetailsAuthenticationProv
>>> >> >
>>> >> > ider.authenticate(AbstractUserDetailsAuthenticationProvider.java:119)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.providers.ProviderManager.doAuthentication(Provider
>>> >> > Manager.java:195)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.AbstractAuthenticationManager.authenticate(Abstract
>>> >> > AuthenticationManager.java:45)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.ui.webapp.AuthenticationProcessingFilter.attemptAut
>>> >> > hentication(AuthenticationProcessingFilter.java:71)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProces
>>> >> > singFilter.java:252)
>>> >> >         at
>>> >> >
>>> >> > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.
>>> >> > java:87)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicPr
>>> >> > ocessingFilter.java:173)
>>> >> >         at
>>> >> >
>>> >> > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.
>>> >> > java:87)
>>> >> >         at
>>> >> >
>>> >> > org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilte
>>> >> > r(HttpSessionContextIntegrationFilter.java:249)
>>> >> >         at
>>> >> >
>>> >> > hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSes
>>> >> > sionContextIntegrationFilter2.java:66)
>>> >> >         at
>>> >> >
>>> >> > hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.
>>> >> > java:87)
>>> >> >         at
>>> >> >
>>> >> > hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.ja
>>> >> > va:76)
>>> >> >         at
>>> >> > hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
>>> >> > icationFilterChain.java:243)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
>>> >> > ilterChain.java:210)
>>> >> >         at
>>> >> >
>>> >> > hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.
>>> >> > java:81)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
>>> >> > icationFilterChain.java:243)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
>>> >> > ilterChain.java:210)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
>>> >> > alve.java:240)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.StandardContextValve.invoke(StandardContextV
>>> >> > alve.java:164)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authentica
>>> >> > torBase.java:462)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j
>>> >> > ava:164)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j
>>> >> > ava:100)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:
>>> >> > 562)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal
>>> >> > ve.java:118)
>>> >> >         at
>>> >> >
>>> >> > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.jav
>>> >> > a:395)
>>> >> >         at
>>> >> >
>>> >> > org.apache.coyote.http11.Http11Processor.process(Http11Processor.java
>>> >> > :250)
>>> >> >         at
>>> >> >
>>> >> > org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce
>>> >> > ss(Http11Protocol.java:188)
>>> >> >         at
>>> >> >
>>> >> > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoin
>>> >> > t.java:302)
>>> >> >         at
>>> >> > java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown
>>> >> > Source
>>> >> > )
>>> >> >         at
>>> >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown
>>> >> > Source)
>>> >> >         at java.lang.Thread.run(Unknown Source)
>>> >> >
>>> >> >
>>> >> > plz suggest
>>> >> >
>>> >> >
>>> >> >
>>> >> >
>>> >> >
>>> >> >
>>> >
>>> >
>>
>
>

Reply | Threaded
Open this post in threaded view
|

Re: Fwd: [Hudson-Dev] active directory integration with Hudson

Glenn J. Mason
On 20/05/11 22:50, Irfan Sayed wrote:
> Either no such user
> >>> >> > 'bvcontrolbuild'
> >>> >> > or incorrect password
Can you access the logs on the AD server to see what it thinks is
happening?

0x75F9E35F.asc (1K) Download Attachment
glenn.vcf (230 bytes) Download Attachment
signature.asc (566 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Fwd: [Hudson-Dev] active directory integration with Hudson

irfanjs
i don't have access on AD server. can you give me specific path so that i can ask IT guys to get the access.
plz suggest



On Mon, May 23, 2011 at 5:40 AM, Glenn J. Mason <[hidden email]> wrote:
On 20/05/11 22:50, Irfan Sayed wrote:
> Either no such user
> >>> >> > 'bvcontrolbuild'
> >>> >> > or incorrect password
Can you access the logs on the AD server to see what it thinks is
happening?

Reply | Threaded
Open this post in threaded view
|

Re: Fwd: [Hudson-Dev] active directory integration with Hudson

Glenn J. Mason
On 23/05/11 13:11, Irfan Sayed wrote:
i don't have access on AD server. can you give me specific path so that i can ask IT guys to get the access.
plz suggest



On Mon, May 23, 2011 at 5:40 AM, Glenn J. Mason <[hidden email]> wrote:
On 20/05/11 22:50, Irfan Sayed wrote:
> Either no such user
> >>> >> > 'bvcontrolbuild'
> >>> >> > or incorrect password
Can you access the logs on the AD server to see what it thinks is
happening?

No, I can't. We've got AD authentication working on our Jenkins install, but we got the Windows administrator involved. To me, your logs (snippet above) show what Hudson thinks is happening (no such user or incorrect password), so (IMHO) you need to do some basic trouble-shooting with your Windows admin...

AD is notoriously hard to integrate with (because each server, version and setup can be different), so you've got to expect these kinds of setup issues.

0x75F9E35F.asc (1K) Download Attachment
glenn.vcf (230 bytes) Download Attachment
signature.asc (566 bytes) Download Attachment